cluster-admin

kubectl create clusterrolebinding add-on-cluster-admin \
 --clusterrole=cluster-admin \
 --serviceaccount=kube-system:default

kubectl get clusterrolebinding -o json | jq '.items[] | select(.roleRef.name=="cluster-admin") | {name: .metadata.name, subjects: .subjects}'

Related

• kubectl get clusterroles
• kind: ClusterRole, kubectl describe clusterrole, kubectl get clusterroles
• admin

EKS RBAC

• AmazonEKSAdminPolicy
• AmazonEKSClusterAdminPolicy

Activities

• Deep dive into the new Amazon EKS Cluster Access Management features

See also

• K8s Cluster roles (kubectl get clusterroles): cluster-admin, admin, edit, view, cluster-read-only-role, User Impersonation
• Kubernetes RBAC kubectl auth, kubectl auth can-i, kubectl auth reconcile kubectl create [ role | clusterrole | clusterrolebinding | rolebinding | serviceaccount ], groups:, Kubernetes RBAC good practices, kube2iam, K8s Cluster roles, rbac.authorization.k8s.io, system:, kind: AuthorizationConfiguration, aws-auth for EKS, kind: Role, SelfSubjectReviews, Impersonation
• RBAC, ABAC, Kubernetes RBAC, ArgoCD RBAC